Privacy policy

Privacy Policy

This Privacy Policy explains how Muffela collects, uses, stores, and protects users’ personal data, in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).

By accessing this website or making a purchase, the user agrees to the practices described in this policy.

Data Collected

We may collect the following personal data:

  • Identification data: first name, last name, email address, phone number

  • Shipping and billing data: full address

  • Payment data: processed exclusively by authorized payment service providers (we do not store card details)

  • Browsing data: IP address, device type, browser, cookies, and website usage data

Purpose of Data Processing

Personal data is used to:

  • Process and deliver orders

  • Manage payments and prevent fraud

  • Communicate with customers regarding orders, deliveries, and support

  • Comply with legal and tax obligations

  • Improve website functionality and security

  • Send marketing communications, when authorized by the user

Legal Basis for Processing

Personal data is processed based on the following legal grounds:

  • Performance of a contract (order processing)

  • Compliance with legal obligations

  • User consent (marketing communications and cookies)

  • Legitimate interest (website security and fraud prevention)

Data Sharing

Personal data may be shared with:

  • Payment platforms and processors

  • Shipping carriers and logistics partners

  • Marketing and analytics platforms (e.g. Meta, Google Analytics)

  • Essential service providers required for store operations

All partners adhere to appropriate data protection standards and GDPR requirements.

Cookies and Similar Technologies

We use cookies to:

  • Ensure essential website functionality

  • Analyze performance and browsing behavior

  • Personalize content and advertising

Users may manage or disable cookies directly through their browser settings. Please note that disabling cookies may affect website functionality.

Data Retention

Personal data is stored only for as long as necessary to:

  • Fulfill contractual purposes

  • Comply with legal obligations

  • Resolve disputes

  • Improve our services

Data Subject Rights (GDPR)

Under the GDPR, users have the right to:

  • Access their personal data

  • Correct inaccurate or outdated data

  • Request deletion of personal data

  • Restrict or object to data processing

  • Request data portability

  • Withdraw consent at any time

Users also have the right to lodge a complaint with the competent data protection authority within the European Union.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

Contact

To exercise your rights or for any questions regarding this Privacy Policy, please contact us exclusively at:

📧 support@muffela.com

Final Notice

By using this website, the user confirms that they have read, understood, and agreed to this Privacy Policy.